Secrets Manager

Icon

Secrets Manager

About

• Newer service to store secrets.

• Capability to force secrets rotation unlike SM Parameter Store.

• Using lambda, can automate the secrets rotation.

• Seemless integration with Amazon RDS and other services.

• Secrets can be encrypted with KMS, mandatorily.

• Integrate with Cloud formation

• Provides waiting period before deletion of a secret. Minimum waiting period is 7 days.

Multi-Region secrets

• Replicate secrets across multiple AWS region.

• Keeps read replicas in sync with primary secret.

• Ability to promote read replica as standalone. This allows to configure DR strategies of secret manager.